Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/files
Pieter f40acee0a3 feat: Add Python script for automated recovery flow creation
Add create_recovery_flow.py script that configures Authentik password
recovery flow via REST API. This script is called by recovery.yml
during deployment.

The script creates:
- Password complexity policy (12+ chars, mixed case, digit, symbol)
- Recovery identification stage (username/email input)
- Recovery email stage (sends recovery token with 30min expiry)
- Recovery flow with proper stage bindings
- Updates authentication flow to show "Forgot password?" link

Uses internal Authentik API (localhost:9000) to avoid SSL/DNS issues
during initial setup. Works entirely via API calls, replacing the
unreliable blueprint-based approach.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-20 19:05:22 +01:00
..
authentik_api.py feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
configure_2fa_enforcement.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
configure_invitation_flow.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
create_recovery_flow.py feat: Add Python script for automated recovery flow creation 2026-01-20 19:05:22 +01:00
custom-flows.yaml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
enrollment-flow.yaml fix: Remove tenant modification from enrollment flow blueprint 2026-01-19 14:06:28 +01:00
invitation-flow.yaml feat: Add automated invitation stage configuration for Authentik 2026-01-14 16:17:44 +01:00